The Box MCP server provides tools that let AI agents interact with Box content and features. Tools are organized by category so you can quickly find the right capabilities for your scenario.
Tools marked Off in the Default column need an admin to turn them on. See Manage tool access in Box product documentation for instructions.
User and authentication
Manage user authentication and retrieve information about the authenticated user.
Files and folders
Access, manage, and modify Box file and folder resources. These tools give you control over content, metadata, and versioning.
Read-only
Write
Search
Locate content and containers using keywords, names, or structured metadata queries with optional filters and scopes.
Collaboration
Enable team collaboration through comments, shared links, and collaboration management tools.
Read-only
Write
Box AI
Use AI-powered tools to ask questions, extract insights, and analyze content across files and hubs.
Hubs
Create and manage Box Hubs for organizing collaborative content and resources around specific topics or projects.
Read-only
Write
Doc Gen
Automate document generation by using templates with placeholder tags to create custom documents at scale.
Read-only
Write
The upload and download URL tools require the AI agent to make a direct network request to transfer the file. Declarative agents can’t make these requests, so these tools work only in agentic (code-executing) environments.
Some clients require you to allowlist specific domains before upload and download URLs work.
If you’re not a Box Zones customer, add the following domains to your allowlist:
The domains you need vary depending on your Box Zone. For the full list, see Configuring A Firewall For Box Applications and Services.
You can also use wildcard domains to allow all subdomains:
Feedback
To share feedback or ask questions about the Box MCP server, visit the Box AI API thread in the Box Developer Community forum. Last modified on September 2, 2026